RE: [PHP] Re: Using register_globals

From: Date: Wed, 04 Jun 2003 16:51:27 +0000
Subject: RE: [PHP] Re: Using register_globals
Groups: php.general 
Request: Send a blank email to php-general+get-150216@lists.php.net to get a copy of this message
[snip] The only reason there to initialize $explodenuke would be for security (register_globals), and there are other cases like this. I generally initialize variables before using them, but there's always going to be a time when someone forgets. That shouldn't present a security hazard, which is why I think register_globals should *always* be off. [/snip] In the corporate environment with multiple developers we have to initialize every variable (it's a rule). We even scan code once a day for variables that have not been declared. It's part of our documentation. Jay

« previous php.general (#150216) next »